IT Platform and Automation Engineer

Snorkel AI • San Francisco, CA

2d • $120,000 - $185,000 • Hybrid

About The Position

We're seeking a IT Platform & Automation Engineer who treats internal infrastructure like a product—not a firefighting exercise. This is not a traditional helpdesk or "break-fix" role. You'll be the architect behind our internal employee experience, acting as the connective tissue between our office network, collaboration services, security stack, and core business systems (People Tech, CRM, and Engineering tools).
If you prefer writing Python scripts over manually resetting passwords, and if you get excited about connecting Claude AI to Greenhouse via custom Slack workflows, we want to talk to you.

This role is NOT:
A traditional helpdesk position. You won't be resetting passwords or shipping laptops.
A pure networking role. You'll touch networks, but automation is the priority.
A machine learning engineer role. You'll experiment with AI, but you won't build vector databases or train models.

Requirements

• 4+ years in IT Engineering, Systems Engineering, or Platform roles with a heavy emphasis on automation and APIs.
• Advanced Python or JavaScript/Node.js. You treat your scripts like software—git, CI/CD, testing, and documentation are non-negotiable. Our current automation stack is built on Python. Familiarity with either is sufficient—we don't expect you to know both.
• Proven experience building custom integrations using REST/GraphQL APIs. You know how to read documentation, handle OAuth2, and parse JSON in your sleep.
• Hands-on experience with Okta or Azure AD (SCIM, Workflows, automation) AND at least one MDM solution (Jamf and Intune).
• You understand least privilege, automated patching, and think about security in every integration you build.
• Core: Identity & Workflow Automation (Okta, SCIM, custom scripting)
• Core: Endpoint Management & security ops related (MDM, zero-touch deployment, patching)
• Secondary: Networking (TCP/IP, VLANs, Wi-Fi, VPN/ZTNA—enough to troubleshoot and configure, not necessarily design from scratch)

Nice To Haves

• Direct experience with Okta, People Tech (Rippling and Greenhouse), Notion, or Slack APIs
• Hands-on experience building with LLM APIs (Anthropic Claude, OpenAI) for internal tools
• Familiarity with Infrastructure as Code (Terraform)
• Experience preparing IT systems for SOC2 or ISO 27001 audits
• Experience with Google Workspace administration and GAM
• Experience with zero-touch deployment workflows (Apple Business Manager, Windows Autopilot)

Responsibilities

• Own our IdP (Okta/Auth0). Implement and automate SSO, MFA enforcement, and SCIM provisioning across all SaaS tools. Enforce zero-trust principles everywhere.
• Own the full hardware and MDM lifecycle. Automate device provisioning, configuration, and secure deployment using Jamf and Intune. Build zero-touch onboarding workflows.
• Design, deploy, and maintain high-availability office networking (cloud-managed switching/routing, Wi-Fi) and secure remote access solutions (ZTNA/VPN) for a hybrid workforce.
• Architect and build custom integrations between our core SaaS stack—syncing data between Okta, Greenhouse, Notion, and our CRM to eliminate manual data entry.
• Own our internal automation layer. We currently use a mix of lightweight no-code tools (Zapier, App Script, AppSheet) and custom Python. We're actively phasing out low-code for mission-critical paths—you'll have permission to replace them with proper code.
• Build and maintain internal dashboards and Slack apps that give employees self-service access to IT, HR, and facilities requests.
• Review and assess connectors (MCP) if available. Otherwise, build lightweight API wrappers and prompt engineering pipelines to connect LLMs (Claude, OpenAI) to internal tools like Slack and Notion.
• Dedicated time each sprint to experiment with new AI models and identify productivity gains for the company.
• Write robust scripts (Python, Bash, PowerShell) to automate security monitoring, endpoint patch management, and compliance reporting.
• Architect centralized alerting pipelines by integrating EDR/SIEM webhooks into Slack via native integrations (CrowdStrike), filtering noise and surfacing only actionable security anomalies.
• Create automated audit trails, access reviews, and reporting to support SOC2 / ISO compliance efforts—no more manual spreadsheet work.

Benefits

• Meaningful opportunities to shape priorities and initiatives
• Influence key strategic decisions
• Directly impact our ongoing success
• Deepen your technical expertise
• Explore leadership opportunities
• Learn new skills across multiple functions
• Supported in building your career in an environment designed for growth, learning, and shared success
• Equal employment opportunities to all employees and applicants for employment
• Reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed